https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:42:56 +0000 https://cve.radiocsirt.org/vuln/cve-2023-48291 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn&#39;t.</p> <p>This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2</p> <p>Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.</p> https://cve.radiocsirt.org/vuln/cve-2023-48291